AU2003201332B2

AU2003201332B2 - A Security System

Info

Publication number: AU2003201332B2
Application number: AU2003201332A
Authority: AU
Inventors: Jeffrey Bruce Mcgeorge
Original assignee: Markets Alert Pty Ltd
Current assignee: Markets Alert Pty Ltd
Priority date: 2000-10-27
Filing date: 2003-03-18
Publication date: 2004-06-10
Anticipated expiration: 2021-10-26
Also published as: CN1406356A; HK1054449A1; AU1364402A; EP1342193A4; US7941357B2; NZ524508A; AUPR109700A0; AU2001100512A4; CN101515363A; AU2001100512B4; AU2002213644B2; WO2002035400A1; EP1342193A1; US20040039683A1; JP2004511872A

Description

A SECURITY SYSTEM TECHNICAL FIELD The present invention relates to a security system which combines credit card activity monitoring and the field of information technology in mobile communications.

BACKGROUND ART Most organisations and individuals regularly use credit cards for obtaining goods and services.

Despite advancements in technologies and security systems in relation to cash or credit transactions, there remains a need for an economic means of detecting credit card fraud at the instance it is taking place.

In Australia alone, credit card fraud amounts to $140 million per annum causing a great deal of inconvenience to cardholders and financial institutions alike.

In Asia, it is reported that credit card fraud exceeds $1 billion per annum.

Most fraudulent transactions take place in the absence of the card where orders are placed for goods or services over the net or by telephone.

The majority of fraudulent transactions are for small amounts.

However, accumulatively, losses are high with costs being passed onto cardholders in general through interest rates.

Whilst banks scan transaction patterns and will contact a cardholder when patterns are unduly changed and warn them that the line of credit will be cancelled if the cardholder does not contact them, this type of security can often back-fire particularly if the transactions are by the cardholder who may be on holiday and not able to respond to any bank communication.

Most cardholders are able to instruct the bank as to limits they wish to apply to their accounts and some customers are able to inform banks of their usage patterns to thus enhance security.

It is an object of the present invention to provide a security system which will reduce credit card fraud in particular frauds where the card is not present.

Further objects and advantages of the present invention will become apparent from the ensuing description which is given by way of example.

According to the present invention there is provided a method of monitoring and confirming credit card usage, the method comprising the steps of: a credit card holder or principal entering into an agreement with a service provider to provide real time credit card activity monitoring service, the service provider monitoring credit card activity using at least one computer, and the service provider providing a real-time message to the cardholder or card cardholder via a remote communications device (RCD).

Typically, the service provider may use a network of more than one computer to monitor the activity. The network as a whole may be termed a central data server and usually comprises a number of drone computers.

Information relating to the use of an individual credit card forms a part of a data feed. When a card is used, the information relating to the transaction is transmitted to a central point, usually a credit agency or a bank.

The information may then be stored in the bank or credit agency's database.

The remote communications device can comprise the cardholder's fixed or mobile telephone, a personal computing device or a facsimile or pager of the cardholder. All of these devices and others which are not listed but are included as a remote communication device can generally have a software component.

The cardholder can communicate to the principal the criteria upon which alerts are to be sent.

The cardholder's RCD software component can be used to send input commands to a software environment that is running on the network of computer systems of the service provider.

In response to the input command the software environment sends a local input command to a software environment component that processes the commands which responds by issuing a local output command to a server infrastructure which in turn sends a remote output command to the cardholder's

RCD.

In response to remote output commands the RCD can cause an alert output to be issued or displayed on or to the RCD.

A plurality of integrated and related systems can be provided to achieve information transfer.

The systems and relationships for information transfer can be as follows; From an Internet software, WAP enabled phone or mobile input device.

The cardholder sends a message or command from a remote communications device, which is directed to the central data server but must generally pass through or be intercepted by a scanning system and/or a switching box. The switching box may form a part of the central data server network.

The message may contain data including information about how to setup the cardholders watches, the type of activity to be monitored as well as information on regular patterns of use of the card, requests for specific data or login information.

(ii) The scanning system may generally receive all messages sent from any computer or device connected or connecting to the system.

The scanning system generally performs at least one but generally a set of security tests on the information requested or submitted to the central data server. These tests are generally called security protocols. If the information requested or submitted is within the ambit of the security protocols, the scanning system may grant access to a secure level (Authorisation level 2) which prevents unauthorised manipulation of the data held or accessed by the central data server.

Once access to authorisation level 2 has been granted, the information may be directed to a switch box to be processed.

The function of the switch box can be to: find the least busy drone computer within a network to process a specific command or watch; route alerts to an SMS (short message service) server to be sent to cardholders' computers or mobile handsets; send requested information between drone computers.

The switch box may be the centre of the system. It generally allocates the workload for each of the drone computers within the central data server and is generally also responsible for the release of alert messages and exchange of information between elements of the system.

(iii) Drone computer systems as part of the network are each connected via a local area network using the TCP/IP protocol (internet protocol). The drones are directly connected to each other to form the network and/or the credit card agency data server and the bank data server.

The drone computers may preferably have two main purposes; they are as follows: to accept, process and return data which a cardholder has requested from the service, and to repetitively calculate cardholders' requested "watch data" (an event set by the cardholder to trigger an alert which is sent to the cardholder's mobile or RCD).

(iv) Communication server software receives a message from a drone computer routed through the switch box.

Once the Communication server software receives the message, the Communication server finds the corresponding cardholders data phone number, name) and passes the message as well as the correct phone number to send the message, to a SMS communications device.

An SMS communications device receives a message from the Communication server and broadcasts it to the remote communications device.

In an alternative embodiment of the present invention one or more "history servers" can be added, the purpose of which is to provide data to any of the computers connected to the network.

The history server is in place so that it can act as a gateway to the data feed.

The history server scoops all of the data out of the data feed as it comes along, so that the data never needs to be requested from an outside source more than once. Once the data is collected from the data feed or from the bank or credit agency database, the history server may store the data in its own database to prevent the need to request the same information numerous times.

All servers connected to the network request their data from the history server.

The drones may be no longer directly connected to the data feed, but instead may be connected to the switch box and request their data from the new history server through the switch box.

A central data storage may be created to house the databases created by the history server.

Each history server connected to the system can then use these databases (located on another computer) so that cohesion remains throughout the network.

BRIEF DESCRIPTION OF THE DRAWINGS Aspects of the present invention will now be described with reference to the accompanying schematic drawings in which; With respect to Figure 1 of the drawings, element 1 sends a message directed to the central data server but the message is intercepted by the scanning system 2 and/or switch box. The message relates to the kind of data to view or what kind of indicators to add to a cardholder's usage patterns.

Element 2 the scanning system receives the message from the Internet, A WAP enabled phone or mobile input device. It then applies security protocols to the message to ascertain whether the information transmitted or requested is authorised information. If the security protocols are satisfied, the message passes to authorisation level 2 and is allowed to proceed.

The message proceeds to the switch box shown in the schematic illustrations as a part of the scanning system. The switch box then finds the least busy drone computer within the central data server network and sends the message to that computer to be processed.

The switch also processes logins and logoffs of the Communication server, drone computers and remote access.

Element 3 represents the central data server which is a series of computers connected via a network (LAN) which is also connected to the credit card agency data server, the bank data server and switch systems.

The drone processes messages from the cardholders (sent via the switch). These messages are requests to monitor usage patterns for irregularities. The drone computer then analyses the data available to it and applies the cardholder's chosen usage patterns, both past and present, to the data. If the data is elicits a positive response the current usage is irregular) the drone computer sends a message to the switch box which then sends it to the communication server.

Data from element 4 is fed from the credit card agency data server or bank data server to the drone computers (when requested to do so by the drone computer).

Element 5 receives a message from a drone computer, which is routed through the switch box.

The message tells the communication server to find out what phone or remote communication device to send a message to.

The communication server then contacts the appropriate communications device and tells it to send the appropriate alert.

Element 6 receives the message from the communication server and broadcasts it to the remote communication device identification number sent to it from the communication server.

With respect to Figure 2 of the drawings an internal server infrastructure can comprise the components illustrated and described below; Gateway: The gateway is one of two parts directly connected to the Intemrnet it allows cardholders and network appliances to connect to their correct server.

Guardian: The guardian keeps track of all major servers on the network. Major servers being single within the given locality. The guardian also has the ability to funnel small amounts of data from load management tools and administrator tools directly to the switchbox for routing and processing.

Alert Manager: The alert manager stores and distribute all created alerts to the least busy drone computer.

Administration tool: The administration tool allows a third party administrator to connect to the system and edit, remove or add cardholders without interrupting the flow of data around the rest of the system.

INS: The INS stores all of the cardholders details, including cardholder names, passwords and financial data. The INS is a request-only server from the service provider side of the network, and data inside it can only be changed from the administrator tool.

Switch: The switch server(s) is a routing device which routes information packets from one server to the other. Any switch's main job is keeping the network free from traffic bouncing between many erroneous servers before getting to its destination. Switchboxes are also used to apply "load balancing" to components of the network which are connected to it.

History Client: The history client(s) contain a large database of credit card usage data which is stored every time a transaction is made on the credit card. The history client is a request-only client which feeds data from itself to the requesting party, be it an internal server or external device.

Alert Client: The alert client(s) do all of the mathematical calculations for alerts currently running on the system. The alert client(s) request data from the history client(s) and process that data through a series of events.

The alert client(s) are responsible for generating the final alert which is sent via the output service.

Output Service: The output service is the network connection software and hardware which connects the network of computers to an output device.

There are two major advantages of the present invention; Credit card usage analysis indicators can be applied to a cardholder past or present usage data and boasts programming which can inform a cardholder of an "indicated" signal to do whatever the indicator was designed to inform the cardholder of, without the cardholder having to ponder over the data themselves.

Credit Card usage analysis indicators can be set to "repeat" over a certain period and can be told to alert the cardholder when an "event" happens, via wireless or non-wireless technology wherever the cardholder may be.

The features of the system which result in the advantages mentioned above are as follows: The system is accessible and active at virtually all times, all day, everyday.

The system can more quickly apply thousands of different or related parameters and/or specified patterns to credit card usage data.

The system is more accurate and mathematical in its interpretation of results.

The system can be designed to be "set" and "run". the cardholder sets up their indicators and can be alerted of them until it is told to be stopped).

Aspects of the present invention have been described by way of example only and it will be appreciated that modifications and additions thereto may be made without departing from the scope thereof.

Claims

1. A method of monitoring and confirming credit card usage, the method comprising the steps of: a credit card holder or principal entering into an agreement with a service provider to provide real time credit card transaction data monitoring service the card holder defining parameters for at least one predetermined anomalous situation, the service provider monitoring real-time credit card transaction data using at least one computer, and comparing the data to the parameters set by the card holder and the service provider providing a real-time alert message to the cardholder via a remote communications device (RCD) when the predetermined anomalous situation occurs.

2. A method as claimed in claim 1 wherein the remote communications device comprises the cardholder's fixed or mobile telephone, a personal computing device or a facsimile or pager of the cardholder.

3. A method as claimed in either claim 1 or 2 wherein the cardholder communicates to the service provider at least one criteria upon which alerts are to be sent.

4. A method as claimed in any one of the preceding claims wherein the service provider uses a network of computers or computer systems to monitor the credit card activity.

A method as claimed in any one of the preceding claims wherein the cardholder's RCD has a software component which can be used to send an input command to a software environment that is running on the network of computer systems of the service provider.

6. A method as claimed in claim 5 wherein in response to the input command, the software environment sends a local input command to a software environment component that processes the command and which responds by issuing a local output command to a server infrastructure which in turn sends a remote output command to the cardholder's RCD.

7. A method as claimed in claim 6 wherein in response to a remote output commands, the RCD issues or displays an alert output.

8. A method as claimed in any one of the preceding claims further comprising the step of providing a plurality of integrated and related systems to achieve information transfer into, out of and between different elements of the monitoring service.

9. A method as claimed in any one of the preceding claims wherein the cardholder can define parameters of a situation in which alert messages are to be issued.

A method as claimed in claim 9 wherein the cardholder can amend or add to the parameters or situations in which alert messages are to be issued and request information from the monitoring service utilising an input command.

11. A method as claimed in claim 10 further comprising the step of providing a scanning system with at least one security protocol and passing all data including the input command through the scanning system to determine whether the data is authorised data, refusing the data if the data does not satisfy the security protocol and processing the data if the data satisfies the security protocol.

12. A method according to one of the preceding claims further comprising the step of providing a switch box to control the monitoring service, the functions of the switch box including at least one of finding the least busy computer to process a specific situation; route alerts to a communication server to be sent to cardholders' RCD's; send and receive information between computers.

13. A method according to any one of the preceding claims wherein a plurality of computers are provided in the form of a network or central data server all connected via a local area network using the TCP/IP protocol (internet protocol).

14. A method according to claim 13 wherein the network is adapted to send and receive information to and from a credit card agency data server and/or a bank data server, each of which contain real time information regarding the transactions of credit cards.

15. A method according to any one of the preceding claims further comprising the step of providing at least one history server, the purpose of which is to provide data to any of the computers, the history server scanning all of the transaction data as it becomes available, so that the data never needs to be requested from an outside source more than once, the history server storing the data in a database to prevent the need to request the same information numerous times.

16. A method of monitoring and confirming credit card usage, the method comprising the steps of: a. a credit cardholder or principal entering into an agreement with a service provider to provide real time credit card transaction data monitoring service for the occurrence of at least one predetermined situation, b. the card holder defining situational parameters for at least one predetermined anomalous situation, c. the service provider monitoring credit card transaction data using at least one computer, information regarding the credit card transaction data obtained from a financial institution or credit provider, and comparing the data to the parameters set by the card holder d. the cardholder able to amend the type and number of predetermined anomalous situations by issuing an input command including situational parameters to a central data server, over a digital communications device, e. scanning the input command using at least one security protocol and passing the input command through the security protocol to determine whether the data is authorised data, refusing the input command if the input command does not satisfy the security protocol and processing the input command if the input command satisfies the security protocol, f. the switch box routing an authorised input command to a network of computers and assigning a computer to process the input command, and g. the service provider providing a real-time alert message to the cardholder or principal via a remote communications device (RCD) if the situational parameters of the input command are satisfied.

17. A method of monitoring and confirming credit card usage according to claim 16 further comprising the step of providing at least one history server, the purpose of which is to provide credit card transaction data to any of the computers, the history server scanning all of the transaction data as it becomes available, so that the data never needs to be requested from an outside source more than once, the history server storing the data in a database to prevent the need to request the same information numerous times.

18. A method of monitoring and confirming credit card usage substantially as described herein with reference to the accompanying drawings. Dated this 1 3 t day of May 2004 Share-Tech Software Pty Ltd By its Patent Attorneys Cullen Co.